[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

ISAKMP-SA & Security Policy



Hello list,

I am a new bee to IPSec. I have learned from reading of IKE-2409 that, ISAKMP-SA, SPI is an concatination of COOKIE of INitiator and COOKIE of responder. Does this mean PF_KEY interface is not used to create SPI for ISAKMP implementation ? Hence there will not any IPSec Policy Set for this SPI ? and Quick Mode exchange is secured by the Keying Material established during the 1St Phase ?. All these interpretations are correct ?

Please clarify.

thanks

Suresh.

 



Do you Yahoo!?
Y! Web Hosting - Let the expert host your web site